Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.
Reproducible Foundry test fork from SunWeb3Sec/DeFiHackLabs. Clone the repo, run forge test against the file path above, and replay the exploit against a mainnet fork at the historical block. Use for reproduction only — not for live targets.
PineProtocol seems to have been exploited. According to SlowMist's analysis, the exploiter's IP is 116.*.*.112. The exploiter has withdrawn ETH from FixedFloat and ChangeNOW, and has transferred 20 ETH to TornadoCash. The exploiter appears to have received part of the bounty. Attack method (per SlowMist): Flash Loan Attack. Reported loss: $ 90,000.
- chain
- —
- protocol
- Pine Protocol
- bug_class
- flashloan
- date_occurred
- 2023-12-22
- loss_usd
- $90,000
- source_id
- sm:pine-protocol::2023-12-22